JP5511277B2 - Authentication system - Google Patents

Description

  The present invention relates to an authentication system that performs authentication based on biometric information.

  As an authentication technology when strict identity verification is required, such as when entering a building or room that manages personal information or confidential information, or when accessing a computer that stores personal information or confidential information, fingerprints, A biometric authentication technique using biometric information relating to a part of the body such as an iris, voice, and vein as an authentication key is known (for example, see Patent Document 1).

In particular, an authentication method using a distribution pattern of veins such as fingers (hereinafter referred to as a vein pattern) as an authentication key uses in-vivo features that cannot be visually recognized from the outside, and therefore, forgery of the authentication key is extremely difficult. There is little psychological resistance.
In this authentication method, a vein pattern, which is an authentication key, is photographed by a vein pattern input device and transmitted to a vein authentication server, and the vein authentication server is authenticated by comparing with a vein pattern registered in advance.

JP2009-42802

  However, for example, when a large number of authentication keys (vein patterns) are registered in the database, such as when accessing a bank's ATM (Automated Teller Machine), the registered vein pattern and the captured vein pattern Processing time is required for collation, and the waiting time until the collation ends is long.

Therefore, as a countermeasure for prolonging the waiting time, for example, a user who wants to receive authentication inputs a user ID (Identifier), reads a vein pattern corresponding to the user ID from the database, and reads the vein pattern There is a method for collating captured vein patterns. However, this method requires the user to remember the user ID.
Further, there is a method of collating a vein pattern recorded on the IC card with a photographed vein pattern using an IC card on which a user's vein pattern is recorded. However, this method requires the user to manage the IC card.
Any of the above-described methods imposes a burden on the user who is going to be authenticated.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an authentication system capable of reducing the processing time required for authentication without imposing a burden on a user who is going to be authenticated. .

In order to achieve the above object, an authentication system according to the present invention includes:
Vein pattern data including a value assigned based on a predetermined criterion for each of a plurality of dots included in the vein pattern, and an addition including a number of dots for which the value applied based on the predetermined criterion satisfies a predetermined condition Storage means for storing information in a combination in the storage unit;
Vein pattern acquisition means for acquiring a vein pattern;
Accepting means for accepting the authentication request;
Vein pattern data creating means for creating vein pattern data based on the vein pattern obtained by the vein pattern obtaining means;
Additional information creating means for creating additional information corresponding to the vein pattern based on the vein pattern data created by the vein pattern data creating means;
In response to the reception of the authentication request by the receiving unit, the number of dots satisfying a predetermined condition included in the additional information stored in the storage unit and the additional information created by the additional information creating unit Authentication candidate selection means for selecting vein pattern data of an authentication candidate from vein pattern data stored in the storage unit based on the number of dots that satisfy a predetermined condition included;
Vein pattern data collating means for collating the vein pattern data of the authentication candidate selected by the authentication candidate selecting means with the vein pattern data created by the vein pattern data creating means;
Equipped with a,
Additional information stored in the storage unit is created based on vein pattern data stored as a set in the storage unit,
It is characterized by that.

Preferably, the authentication system according to the present invention comprises:
The accepting means accepts a registration request;
Said storage means is responsive to the registration request by said reception means has been accepted, and the vein pattern data generated by the vein pattern data production means, and additional information created by said additional information creating means the Memorize in memory
It is characterized by that.

  According to the present invention, the processing time required for authentication can be shortened without imposing a burden on the user who is going to be authenticated.

It is a figure which shows the authentication system which concerns on embodiment of this invention. It is a figure which shows an example of the corrected vein pattern typically. It is a figure which shows an example of a data structure of a vein database. It is a figure which shows the flowchart of a process of a terminal. It is a figure which shows the flowchart of a process of the server for vein authentication. It is a figure which shows the detailed flowchart of a total dot number count process with a vein.

  Hereinafter, an authentication system according to an embodiment of the present invention will be described with reference to the drawings.

An authentication system 1 according to an embodiment of the present invention includes a vein authentication server 10 and a terminal 20 as shown in FIG. The vein authentication server 10 includes a vein database 11. The terminal 20 includes a vein pattern acquisition unit 21, an input unit 22, and a display unit 23. The vein authentication server 10 and the terminal 20 are connected to a network 30.

The vein authentication server 10 includes a CPU (Central Processing Unit) and a memory such as a RAM (Random Access Memory) and a ROM (Read Only Memory).
The vein database 11 stores later-described vein pattern data and the total number of dots with veins. The total number of dots with veins is additional information obtained from vein pattern data.
The vein authentication server 10 executes a registration process and a recognition process described later. Here, the registration process is a process of storing the vein pattern data and additional information created from the vein pattern photographed by the vein pattern acquisition unit 21 described later in the vein database 11. Further, the authentication process is a process of verifying by comparing the vein pattern data created from the vein pattern photographed by the vein pattern acquisition unit 21 with the vein pattern data stored in the vein database 11.

The terminal 20 includes a CPU and a memory. The CPU of the terminal 20 controls the vein pattern acquisition unit 21, the input unit 22, and the display unit 23. The CPU of the terminal 20 permits the authenticated user to execute the predetermined process, and prohibits the unauthenticated user from executing the predetermined process.
For example, the vein pattern acquisition unit 21 acquires a vein pattern by photographing the finger by irradiating infrared rays onto the user's finger placed at a predetermined position.
The input unit 22 includes various switches, a keyboard, a mouse, and the like. The input unit 22 receives a registration request and an authentication request.
Here, the registration request is a request for causing the vein authentication server 10 to perform registration processing. The authentication request is a request for causing the vein authentication server 10 to perform authentication processing.
The display unit 23 includes a display, a printer, and the like. The display unit 23 displays the result of registration processing and authentication processing in the vein authentication server 10.

When the input unit 22 receives a registration request or an authentication request, the terminal 20 acquires a vein pattern using the vein pattern acquisition unit 21. The terminal 20 creates vein pattern data from the acquired vein pattern, and transmits the vein pattern data to the vein authentication server 10 along with the registration request or the authentication request via the network 30.
The vein authentication server 10 creates additional information from the received vein pattern data.

  As shown in FIG. 2, the terminal 20 geometrically normalizes and corrects the imaged vein pattern by enlarging, reducing, rotating, and the like. The corrected vein pattern 100 is formed with fine dots as shown in a section 102 obtained by enlarging the small section 101. The vein pattern 100 includes N × M dots in total.

The vein authentication server 10 sets a value (score) to each of N × M dots included in the vein pattern 100 based on a predetermined criterion, and generates vein pattern data.
Here, the predetermined reference is, for example, three stages of “inside of finger and having blood vessel”, “inside of finger and having no blood vessel”, and “outside of finger”. In this case, “00” is used for a dot that is inside the finger and has a blood vessel, “10” is a dot that is inside the finger and has no blood vessel, and “11” is a dot that is outside the finger. "Is given by 2 bits each.

FIG. 3 is a diagram illustrating an example of a configuration of data stored in the vein database 11. The vein database 11 is composed of a total dot number information with veins 201, vein pattern data 202, and registrant information 203 as a set of data.
As described above, the vein pattern data 202 indicates the score given to each dot included in the vein pattern divided into vertical M dots and horizontal N dots.
The total number of dots with veins information 201 indicates, for example, the number of dots in which “00” is set as the score among the dots included in the vein pattern data 202, that is, the number of dots with blood vessels. The vein total dot number information 201 is a value that can be derived from authentication vein pattern data registered in an already operating authentication system. The total dot number information 201 with veins can be calculated and added without newly capturing a vein pattern. The total number of dots with veins 201 is used as a search key for searching and selecting the vein pattern data 202 of the authentication candidate, as will be described later.

FIG. 4 is a flowchart of processing in the terminal 20.
The vein pattern acquisition unit 21 captures a vein pattern when a user's finger is placed at a predetermined position. The CPU of the terminal 20 acquires the photographed vein pattern (S101). Next, the CPU of the terminal 20 normalizes and corrects the vein pattern (S102). Then, the CPU of the terminal 20 creates vein pattern data from the corrected vein pattern (S103).
The input unit 22 receives a registration request or an authentication request. When the input unit 22 receives a registration request (S104: Yes), the CPU of the terminal 20 displays a message for prompting the input of the registrant name on the display unit 23 (S105). The input unit accepts a message input by a user who has seen the message. When the input unit 22 receives the registrant name (S106: Yes), the CPU of the terminal 20 transmits a registration request signal indicating a registration request, vein pattern data, and registrant information indicating the registrant name to the vein authentication server 10. (S107). When the input unit 22 receives the authentication request, the CPU of the terminal 20 transmits an authentication request signal indicating the authentication request and vein pattern data to the vein authentication server 10 (S108).

FIG. 5 is a flowchart of processing of the vein authentication server 10.
When receiving the registration request signal or the authentication request signal from the terminal 20, the CPU of the vein authentication server 10 obtains the total number of dots with veins included in the received vein pattern data (S201).

FIG. 6 is a detailed flowchart of the total dot count process with veins in step S201.
In the total dot count process with veins, the CPU of the vein authentication server 10 first initializes variables m, n, and t to 1, 1, and 0, respectively (S2011). Here, (n, m) indicates the position of the dod included in the vein pattern data. Hereinafter, the dot at the position specified by (n, m) is referred to as dot (n, m).
The variable t indicates the counted number of dots with veins. When there is a blood vessel in the dot (n, m) (S2012: Yes), the CPU of the vein authentication server 10 adds 1 to the variable t (S2013).

Next, the CPU of the vein authentication server 10 increments n by 1 (S2014) and compares it with the number N of dots in the horizontal direction of the vein pattern 100 (see FIG. 2) (S2015). If n is equal to or less than the number N of dots in the horizontal direction (S2015: No), the CPU of the vein authentication server 10 returns to step S2012 and determines whether there is a blood vessel at the dot (n, m).
When the variable n is larger than the number of dots N in the horizontal direction (S2015: Yes), the CPU of the vein authentication server 10 initializes the variable n to 1 and increments the variable m by 1 (S2016). Is compared with the number of dots M in the vertical direction (see FIG. 2) (S2017).

  If the variable m is equal to or less than the number of dots M in the vertical direction (S2017: No), the CPU of the vein authentication server 10 returns to step S2012 and determines whether there is a blood vessel at the dot (n, m). When the variable m is greater than the number of dots M in the vertical direction (S2015: Yes), the CPU of the vein authentication server 10 sets the value of the variable t as the total number of dots with veins (S2018).

Next, as shown in FIG. 5, the CPU of the vein authentication server 10 determines which of the registration request signal and the authentication request signal is received from the terminal 20 (S202).
When receiving the registration request signal (S202: Yes), the CPU of the vein authentication server 10 registers (stores) the total number of dots with veins, vein pattern data, and registrant information in the vein database 11 (stores). S203), the process is terminated.

  When receiving the authentication request signal (S202: No), the CPU of the vein authentication server 10 performs authentication based on the total number of dots with veins obtained in step S201 from the data stored in the vein database 11. Candidate authentication pattern data is selected and authentication processing is performed (S204 to S208). That is, the CPU of the vein authentication server 10 selects, for example, data having a total number of veins with veins in a predetermined range as authentication candidates around the total number of veins with veins obtained in step S201. Then, the authentication pattern data included in the selected authentication candidate data and the authentication candidate data received from the terminal 20 are collated to perform an authentication process.

  Specifically, the CPU of the vein authentication server 10 subtracts, from the total number of dots with veins, a value obtained by multiplying the total number of dots with veins obtained in step S201 by 1 by multiplying the rejection rate by the principal and subtracts it from the total number of dots with veins. Substitute (S204). Next, the CPU of the vein authentication server 10 collates the vein pattern data received from the terminal 20 with the vein pattern data in which the total number of dots with veins is equal to s among the data stored in the vein database 11 ( Compare) (S205).

The CPU of the vein authentication server 10 determines that it is authenticated as a legitimate user (registered user) when it can be considered that both match (S206: Yes), and confirms that the terminal 20 has been successfully authenticated. An authentication success signal is transmitted (S209).
Here, even when the vein pattern of the same person is photographed, the vein pattern often differs depending on the photographing conditions. For example, the thickness of a blood vessel in a finger vein varies somewhat depending on the time of day, and changes with growth. For this reason, even if the vein pattern data stored in the vein database 11 and the vein pattern data received from the terminal 20 are simply compared, they rarely match. Therefore, the CPU of the vein authentication server 10 calculates, for example, the similarity between the vein pattern data stored in the vein database 11 and the vein pattern data received from the terminal 20, and the similarity is equal to or higher than a predetermined reference. If there is, it is considered to match.
When the terminal 20 receives the authentication success signal, the terminal 20 displays a message indicating that the authentication has been successful, and permits the authenticated user to execute a predetermined process.

The CPU of the vein authentication server 10 increases the value of the variable s by 1 when the two cannot be regarded as matching (S206: No) (S207). Then, the CPU of the vein authentication server 10 adds the total number of dots with veins to the value obtained by multiplying the total number of dots with veins obtained in step S201 by 1 by multiplying the rejection rate by the principal (hereinafter referred to as the maximum value). ) And the variable s (S208).
When the variable s is larger than the former value (S208: Yes), the CPU of the vein authentication server 10 determines that the user is an unauthorized user and has not been authenticated as a valid user, and that the terminal 20 has failed in authentication. The authentication failure signal shown is transmitted (S210). When the terminal 20 receives the authentication failure signal, the terminal 20 displays a message indicating that the authentication has not been performed on the display unit 23 and prohibits the user from executing a predetermined process.
When the variable s is equal to or less than the maximum value (S208: No), the CPU of the vein authentication server 10 returns to step S205.

  For example, when the total number of dots with vein data is “2000” and the rejection rate of the authentication system 1 is “0.001%”, the CPU of the vein authentication server 10 performs steps S204 to S208 to determine the total number of vein data. Selection is started from data with the number of dots of 2000− (2000 × 0.001 + 1) = 1997, and data with a total number of dots with vein data of 2000+ (2000 × 0.001 + 1) = 2003 is selected. However, the value after the decimal point is rounded down.

In the above embodiment, the authentication system 1 is configured by the vein authentication server 10 and the terminal 20, but the authentication device includes the vein database 11, the vein pattern acquisition unit 21, the input unit 22, and the display unit 23. The authentication apparatus may execute all the processes of the terminal 20 and the vein authentication server 10 described above.

  In the above embodiment, the terminal 20 corrects the vein pattern and creates the vein pattern data. However, the terminal 20 transmits the vein pattern captured by the vein pattern acquisition unit 21 to the vein authentication server 10. The vein authentication server 10 may correct vein patterns and create vein pattern data. Alternatively, the terminal 20 may transmit the corrected vein pattern to the vein authentication server 10, and the vein authentication server 10 may create the vein pattern data.

  In the above embodiment, the vein database 11 is registered with the vein total dot number information 201, the vein pattern data 202, and the registrant information 203. However, the registrant information 203 is registered in the vein database 11. May be registered, and the total dot number information 201 with veins and vein pattern data 202 may be registered as a set.

In the above embodiment, the predetermined criteria for setting values (scores) for each dot included in the vein pattern 100 are “inside the finger and there is a blood vessel” and “inside the finger and there is a blood vessel”. “None” and “outside of finger” are described in three stages. However, a blood vessel existence probability is set as a predetermined reference, and a value of up to 8 bits or 16 bits may be given as a score depending on the blood vessel existence probability. . That is, the darkness of the color of the photographed vein image may be classified by gray scale gradation, and a value may be given to each dot according to a certain probability of blood vessels. For example, a value representing a darker color may be given as the probability of blood vessels increases.
In this case, the CPU of the vein authentication server 10 has a blood vessel in the dot (n, m) when the value of the dot (n, m) is larger than a predetermined reference value in step S2012 in FIG. S2012: Yes), and when the value of the dot (n, m) is less than or equal to a predetermined reference value, it is determined that the dot (n, m) has no blood vessel (S2012: No).

  In the above embodiment, the additional information (total number of dots with veins information 201) is created from the authentication pattern data (vein pattern data 202). However, the additional information is created from the acquired authentication pattern (vein pattern). Also good. If the additional information and the authentication pattern data are combined and recorded in the vein database 11, an authentication candidate is obtained based on the additional information created from the authentication pattern acquired at the time of authentication and the additional information recorded in the vein database 11. Authentication pattern data can be narrowed down. This makes it possible to create additional information by a simple method regardless of the method of creating authentication pattern data.

  Further, even if the system collates by a method different from the above-described collation method, if additional information can be created based on the acquired authentication pattern or authentication pattern data for authentication, an authentication candidate based on the additional information can be created. It goes without saying that the present invention for narrowing down the authentication pattern data can be applied.

  Moreover, although the example which uses the vein of a finger | toe as biometric information was shown in the said embodiment, this invention is a system which authenticates based on the biometric information regarding parts of the body, such as veins other than a finger, a fingerprint, an iris, and a sound. Can be applied to.

As described above, according to the present invention, the processing time required for authentication can be shortened without imposing a burden on the user who is going to be authenticated.
Further, when creating additional information (total number of dots with veins information 201) based on authentication pattern data (vein pattern data 202) for authentication registered in an operating authentication system, a new authentication pattern Additional information can be created from registered authentication pattern data without acquiring (imaging) (vein pattern).

  Although the embodiments of the present invention have been described above, various modifications and combinations necessary for design reasons and other factors are described in the inventions described in the claims and the specific embodiments described in the embodiments of the invention. It should be understood that it falls within the scope of the invention corresponding to the examples.

DESCRIPTION OF SYMBOLS 1 ... Authentication system, 10 ... Server for vein authentication, 11 ... Vein database, 20 ... Terminal, 21 ... Vein pattern acquisition part, 22 ... Input part, 23 ... Display part, 30 ... Network, 100 ... Corrected vein pattern, 101: Small section 102: Enlarged section 201: Total number of dots with veins information 202: Vein pattern data 203: Registrant information

Claims (2)

Vein pattern data including a value assigned based on a predetermined criterion for each of a plurality of dots included in the vein pattern, and an addition including a number of dots for which the value applied based on the predetermined criterion satisfies a predetermined condition Storage means for storing information in a combination in the storage unit;
Vein pattern acquisition means for acquiring a vein pattern;
Accepting means for accepting the authentication request;
Vein pattern data creating means for creating vein pattern data based on the vein pattern obtained by the vein pattern obtaining means;
Additional information creating means for creating additional information corresponding to the vein pattern based on the vein pattern data created by the vein pattern data creating means;
In response to the reception of the authentication request by the receiving unit, the number of dots satisfying a predetermined condition included in the additional information stored in the storage unit and the additional information created by the additional information creating unit Authentication candidate selection means for selecting vein pattern data of an authentication candidate from vein pattern data stored in the storage unit based on the number of dots that satisfy a predetermined condition included;
Vein pattern data collating means for collating the vein pattern data of the authentication candidate selected by the authentication candidate selecting means with the vein pattern data created by the vein pattern data creating means;
Equipped with a,
Additional information stored in the storage unit is created based on vein pattern data stored as a set in the storage unit,
An authentication system characterized by that. The accepting means accepts a registration request;
In response to the registration request being accepted by the accepting means, the storage means outputs the vein pattern data created by the vein pattern data creating means and the additional information created by the additional information creating means Memorize in memory
The authentication system according to claim 1, wherein:

Images